Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          AnGvjM6p6L6a2RMxNpgjfz2kDBLQyCLbVQCxQRg8OIU=
Subject key identifier:   D9:30:FC:0F:64:73:86:48:B1:65:9A:C6:0A:12:35:25:19:32:FA:80
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       0196C0817A5A35A67FD27EF60F708961B404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 18:00:32 +0000
Manifest this update:     Sun 11 May 2025 18:00:32 +0000
Manifest next update:     Mon 12 May 2025 18:00:32 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: p36cdM/j/aS4JVCOJPiPmawgs3rzS/U2iPOZQOOTjAs=)
                          2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:7a:5a:35:a6:7f:d2:7e:f6:0f:70:89:61:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: May 11 18:00:32 2025 GMT
            Not After : May 12 18:00:32 2025 GMT
        Subject: CN=d930fc0f64738648b1659ac60a1235251932fa80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:5b:9d:8a:c9:db:b6:57:a3:a7:06:09:0f:
                    be:d6:29:7e:53:75:43:63:b7:f7:ed:70:05:d9:7c:
                    dd:c3:31:c1:5a:8e:cb:67:34:b1:bb:b2:27:d3:e0:
                    72:9d:97:a0:0d:7c:01:35:85:71:e9:96:b2:7b:5f:
                    cf:33:45:72:83:20:c7:4f:16:04:6c:44:dc:6f:66:
                    17:b4:bf:bb:f6:f4:59:d0:ee:f3:0c:7b:e9:ef:9c:
                    a8:93:8c:d2:3a:f3:45:c5:b0:b1:1c:fe:81:55:bb:
                    90:f2:8b:62:8b:55:59:9c:2a:db:1d:67:ec:89:86:
                    03:c5:1b:d4:90:da:b6:07:da:a3:2f:04:8d:1c:20:
                    6f:15:3a:09:75:a4:9a:2f:5c:5d:6c:21:19:02:7e:
                    58:88:56:7c:88:73:14:40:7b:11:3b:3b:df:92:8b:
                    69:da:ab:6d:9d:15:fc:09:1f:6a:bc:25:a6:76:8b:
                    6d:a6:e2:5e:83:31:cd:d5:71:64:99:ab:10:db:2e:
                    4f:0f:d1:7b:5f:0c:55:45:8f:84:c3:83:7c:a1:5a:
                    56:2d:3c:30:2e:09:0d:ab:92:de:79:58:b5:f0:bc:
                    ad:eb:17:1d:68:95:0f:2d:1f:c1:65:c0:2f:04:1e:
                    64:66:a4:68:b3:ad:d2:d9:5a:1e:3c:2c:60:7b:89:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:30:FC:0F:64:73:86:48:B1:65:9A:C6:0A:12:35:25:19:32:FA:80
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:fc:43:4d:6a:1c:9c:c3:6b:fe:26:f2:1e:5e:4e:95:cb:
         1a:0b:ff:ec:f1:a6:2c:81:e1:b9:a7:08:5d:4b:fe:29:d7:4c:
         e8:67:71:72:63:99:0a:f5:77:7a:10:3e:20:02:0f:d4:d3:ea:
         57:5e:e7:11:a9:a8:f1:ba:fd:c2:31:96:ac:74:31:04:22:d3:
         18:d9:09:1b:29:b9:66:36:97:04:3c:a0:64:5f:e4:ca:1a:c3:
         b4:ed:6d:09:14:27:6b:e2:10:72:aa:5d:38:da:94:8b:04:cd:
         04:88:8a:86:5d:1b:96:d2:2b:d6:d9:05:dc:ee:91:22:70:4d:
         30:98:56:53:e0:36:c8:7a:0b:78:d1:86:ed:aa:57:9c:89:52:
         1e:da:6b:99:73:74:b4:76:63:c2:d9:e7:1d:8b:00:66:07:e4:
         75:0b:e0:a4:52:9a:a9:c4:d8:eb:72:ca:71:87:6d:54:43:eb:
         ef:c4:af:5c:04:7c:63:92:a4:59:2f:49:df:c4:9e:99:71:27:
         78:18:0a:03:f6:5e:7b:9a:be:d1:97:96:b8:62:e4:da:a6:65:
         4d:dc:94:d8:7e:5d:e3:6d:03:2d:a2:57:d9:43:22:d8:4b:7f:
         eb:b5:04:53:2d:c8:02:99:e1:1d:ed:1e:ec:8e:85:2e:91:e4:
         c0:6d:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:01 2025 by rpki-client